Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in birch-a5vvj-zhve1-ash-project (npm)
- Aug 14, 2025
Malicious code in bip30 (npm)
- Aug 14, 2025
Malicious code in biotechnology-superagent-primatology-juno (npm)
- Aug 14, 2025
Malicious code in biotechnology-rimraf-yakutsk-greatfilter (npm)
- Aug 14, 2025
Malicious code in biotechnology-parsec-cosmiconfig-run-script (npm)
- Aug 14, 2025
Malicious code in biotechnology-helmet-robotics-gacrux (npm)
- Aug 14, 2025
Malicious code in biotechnology-cache-axios-triton (npm)
- Aug 14, 2025
Malicious code in biosignature-rocket-carpo-blueshift (npm)
- Aug 14, 2025
Malicious code in biosignature-eclipse-puppeteer-hydra (npm)
- Aug 14, 2025
Malicious code in biosignature-cryovolcano-geochronology-kinetic (npm)
- Aug 14, 2025
Malicious code in biosignature-carina-fomalhaut-axios (npm)
- Aug 14, 2025
Malicious code in biosignature-bionics-bionics-hermes (npm)
- Aug 14, 2025
Malicious code in bioshock (npm)
- Aug 14, 2025
Malicious code in bionics-photon-google-biomimicry (npm)
- Aug 14, 2025
Malicious code in bionics-lightyear-changelog-spica (npm)
- Aug 14, 2025
Malicious code in bionics-lacerta-astrochemistry-stratosphere (npm)
- Aug 14, 2025
Malicious code in bionics-fornax-library-impulse (npm)
- Aug 14, 2025
Malicious code in biomimicry-supercluster-apollo-mutation (npm)
- Aug 14, 2025
Malicious code in biomimicry-rigel-readable-cypress (npm)
- Aug 14, 2025
Malicious code in biomimicry-mesosphere-outercore-capella (npm)
- Aug 14, 2025
Malicious code in biomimicry-dorado-cosmology-figures (npm)
- Aug 14, 2025
Malicious code in biomimicry-cluster-geckodriver-schema (npm)
- Aug 14, 2025
Malicious code in bioinformatics-transport-cz-conventional-changelog-kaus (npm)
- Aug 14, 2025
Malicious code in bioinformatics-foundation-eslint-plugin-galaxy (npm)
- Aug 14, 2025
Malicious code in bioinformatics-fetch-heka-publish (npm)
- Aug 14, 2025
Malicious code in bioinformatics-ceres-jovian-nightmare (npm)
- Aug 14, 2025
Malicious code in bioinformatics-areology-element-ui-mira (npm)
- Aug 14, 2025
Malicious code in biohacking-radiant-websockets-link (npm)
- Aug 14, 2025
Malicious code in biohacking-accretion-astrophysics-deimos (npm)
- Aug 14, 2025
Malicious code in biogeochemistry-sync-sedna-parallax (npm)
- Aug 14, 2025
Malicious code in biogeochemistry-astrobiology-iota-eclipse (npm)
- Aug 14, 2025
Malicious code in bindofn (npm)
- Aug 14, 2025
Malicious code in bind-key (npm)
- Aug 14, 2025
Malicious code in binarypi (npm)
- Aug 14, 2025
Malicious code in binary-install-example (npm)
- Aug 14, 2025
Malicious code in binadit (npm)
- Aug 14, 2025
Malicious code in bim-authorization (npm)
- Aug 14, 2025
Malicious code in billets (npm)
- Aug 14, 2025
Malicious code in billalo (npm)
- Aug 14, 2025
Malicious code in billagmtserv (npm)
- Aug 14, 2025
Malicious code in bill-calculator (npm)
- Aug 14, 2025
Malicious code in bilginiz (npm)
- Aug 14, 2025
Malicious code in bilard (npm)
- Aug 14, 2025
Malicious code in bilagscan (npm)
- Aug 14, 2025
Malicious code in bigxmac (npm)
- Aug 14, 2025
Malicious code in bigwise (npm)
- Aug 14, 2025
Malicious code in bigwebappwebapp (npm)
- Aug 14, 2025
Malicious code in bigwebappweb (npm)
- Aug 14, 2025
Malicious code in bigwebapp (npm)
- Aug 14, 2025
Malicious code in bigpicture-js (npm)
Page 5677 of 6,634